syzkaller login: [   74.241427] sshd (231) used greatest stack depth: 24192 bytes left
Warning: Permanently added '[localhost]:19557' (ECDSA) to the list of known hosts.
2024/10/21 07:59:23 fuzzer started
2024/10/21 07:59:24 dialing manager at localhost:45639
[   78.064924] cgroup: Unknown subsys name 'net'
[   78.179159] cgroup: Unknown subsys name 'cpuset'
[   78.190982] cgroup: Unknown subsys name 'rlimit'
2024/10/21 07:59:48 syscalls: 214
2024/10/21 07:59:48 code coverage: enabled
2024/10/21 07:59:48 comparison tracing: enabled
2024/10/21 07:59:48 extra coverage: enabled
2024/10/21 07:59:48 setuid sandbox: enabled
2024/10/21 07:59:48 namespace sandbox: enabled
2024/10/21 07:59:48 Android sandbox: enabled
2024/10/21 07:59:48 fault injection: enabled
2024/10/21 07:59:48 leak checking: enabled
2024/10/21 07:59:48 net packet injection: enabled
2024/10/21 07:59:48 net device setup: enabled
2024/10/21 07:59:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/21 07:59:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/21 07:59:48 USB emulation: enabled
2024/10/21 07:59:48 hci packet injection: enabled
2024/10/21 07:59:48 wifi device emulation: enabled
2024/10/21 07:59:48 802.15.4 emulation: enabled
2024/10/21 07:59:48 fetching corpus: 0, signal 0/0 (executing program)
2024/10/21 07:59:50 starting 8 fuzzer processes
07:59:50 executing program 0:
keyctl$link(0x8, 0x0, 0xfffffffffffffffc)
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="0e783669204c3cc5435ba431d327ae1a4ce599786d161077553844f4f44823880f92cbf7", 0x24, 0xfffffffffffffffe)
r1 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='%!^\x00', 0xfffffffffffffffa)
socket$inet(0x2, 0xa, 0xffffffff)
r2 = geteuid()
keyctl$chown(0x4, r0, r2, 0xee00)
request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='%!^\x00', r1)
r3 = request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='^\x00', 0xffffffffffffffff)
keyctl$invalidate(0x15, r3)
r4 = getuid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@expire={0x1e8, 0x18, 0x100, 0x70bd28, 0x25dfdbfd, {{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x38e1, 0x4e21, 0x1, 0x2, 0x0, 0xa0, 0x2b, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xd4}, @in6=@private0, {0x7fffffff, 0x81, 0x5, 0x80, 0x5, 0x31d45f34, 0x240, 0x1ff}, {0x5, 0x3ff, 0x0, 0x2}, {0x80000001, 0x5, 0xffca}, 0x70bd27, 0x34ff, 0x2, 0x2, 0x17, 0x100}, 0x3f}, [@sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@local, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x40, 0x0, 0x92bc7a527f6900d3, 0x0, r4}, {@in=@empty, 0x4d2, 0x32}, @in=@multicast2, {0xffff, 0x80000001, 0x2, 0x800, 0x1000, 0x4, 0x6, 0xfffffffffe4bf381}, {0xff, 0x7fffffff, 0x9, 0x1ff}, {0x5, 0x5}, 0x70bd27, 0x3503, 0x2, 0x2, 0x1, 0x28}}, @mark={0xc, 0x15, {0x35075b, 0xffff7fff}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4840)
add_key(&(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="fe40612832d275d9", 0x8, 0x0)
r5 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='asymmetric\x00', r3)
add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r3)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000007c0)={r0, 0x75, 0x3f}, &(0x7f0000000800)={'enc=', 'raw', ' hash=', {'crct10dif-arm64-ce\x00'}}, &(0x7f0000000880)="a08f56d3bc5ad95ff4c8fbd74e7c55ea90bf2b6421e135135ee70d23d233cc76135a95f9c5863bac0395bb19266dbbe26a6e083d9cc51e1d1b4e51154f2af49700bb591018be9d469d1b10448ce451aabd55cf0b56fba5fd6e7c84a53957e94418fcb6a4e9742f13dd6d666926b2341cf88e4d41d8", &(0x7f0000000900)="4bb03510a76b55cc63e1ea8778f8db6142d49c2f1a41578959c4a85322094900b89294acfbcf45bc81cf4ba76fb1b43dd18f54ad1d3f6a0c7d9e5442ff239b")
keyctl$chown(0x4, 0x0, r2, 0x0)
add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000880}, 0x8000)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b00)={r3, 0x65, 0x69}, 0x0, &(0x7f0000000b40)="1e631ee08c085d3582ba95411666ec44024ecb975b372efce21209fa9db99a151fdff9c9dd00e19494594295cea00f175599a987ff98c1f9b6863aee1b5075af57d644bd75d9fb48b13ddfaa924cf214d5c2b42f72584b627488d59208c7f41a24e64e3098", &(0x7f0000000bc0)=""/105)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, r5, 0x0)

07:59:50 executing program 1:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100))
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/33)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000180))
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x204, &(0x7f00000001c0)={[{0xd6, 0x4e00, "9143afc1076bf8e443d21d1ccb18654ae6aebefef066aaa3b83d95da4a516f3ba4b67a226f9f42aedd5e349f937e7cea8ec335431ce5aee19439944d2c9c5f400e6da7bc913bdc341a2ad9ead4803f2880e75f94bad3c99793f5d19648bf61a5516288694a0134f136d63ac6333e5246a5f189b1e0d39a479d0b582e616b2dec3f82e782c9a9909e2cd3d2b8566c667a0999fbe925f4eb65061ab184f1fa03ba6ab4f6d19d5e75b14183baa6a9054963e57f80d1e215e9709f74830f06681598a2cfd2500db5a838a719a7d9023af66679a74c0af568"}, {0xd7, 0x4e00, "d4798d3b45e1d615f301ba6d50f6d3b79bfdf2e100748ea38e3538721ba55becae00e932bf7ba140abcf59cbbc97f88e8f5ac8a1167a94d7894bfc0eee748908c6dd90c70c27623608fdd3757a3d8b6d8701733718f43c00aa8d487acaa11859e37ca3dbeddcf756a5eb91732d2637f74b324c1c757ad304c911eb6ebf0a7eda8f6a3bcdf7483669978c2c371da50dd38ff3cb6f1c2db4173cc3989c89415b7eaae38384f664449fd6519fc2a97bb294e615bf7ad1aa56f3c5303711565eac68715e9a947256be743228648bafb99baf9c1d74db15b9ec"}, {0x2b, 0x4e00, "16c5f2442db9560ab7ae4ebb9800a67a635423cb24a8e6acc636f6a8e808331cb6412bc8602d8b0ff6008d"}, {0x18, 0x4e00, "e3758949f51a5bc5c27c9572ee523df5fac60fdfcdfebc19"}]})
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000440))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000004c0)=0x1)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xc3, 0x6, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x63}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5e}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x105000, 0x0)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000006c0)=""/152)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000780)=0x2)
socket$inet(0x2, 0x1, 0xfffff000)
openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x406502, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)

07:59:50 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x40808)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180))
socketpair(0x1a, 0xb, 0x5, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1800}, 0x4084001)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r6=>0x0})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x6, 0x1f})
r8 = openat$cgroup(r7, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r8, &(0x7f0000000500)='syz1\x00', 0x1ff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={0x324, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x800}, 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80a000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040804)

07:59:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7eb4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ada}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000031}, 0x4000081)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x943bd44b9d875aba}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x644d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x200800d5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x24048000)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfe}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x240c1}, 0x800)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb379}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r3)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x8084)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r2)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)

07:59:50 executing program 6:
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x8)
r0 = io_uring_setup(0x7ecf, &(0x7f0000000080)={0x0, 0x5e1f, 0x8, 0x0, 0x3bd})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x1ff)
r2 = eventfd2(0xbc, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r2, 0x1)
write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x3, 0x8)
r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x5, 0x40, 0x80, 0x2b, 0x0, 0x7, 0x88809, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x10, 0x5cfffea1, 0x6, 0x0, 0x68f40d79, 0x8000, 0x6, 0x0, 0x7, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
r4 = getpgrp(0xffffffffffffffff)
r5 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xff, 0x1d, 0x3e, 0x0, 0x7fff, 0x80004, 0x3b64322857fb326c, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7189, 0x6cf2}, 0x4290, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0xffc1, 0x0, 0x6}, 0x0, 0xe, r3, 0x1)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x81, 0x40, 0x26, 0x0, 0x7fff, 0x4, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x0, 0x1}, 0x40000, 0x4, 0x80000001, 0x1, 0x7, 0x9, 0x81, 0x0, 0x1641, 0x0, 0xffffffffffff4b0e}, r4, 0x8, r5, 0x0)
socketpair(0x18, 0x4, 0x0, &(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x90}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r8, &(0x7f0000000580)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x87e9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socketpair(0x9, 0x800, 0x7f, &(0x7f0000000700))
syz_genetlink_get_family_id$team(&(0x7f0000000740), 0xffffffffffffffff)

07:59:50 executing program 5:
ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/176)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100))
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000140)={0x4, 0x4, 0x2, 0x2, @msf={0x8, 0x9, 0x2}, 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x110)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000001c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12001, 0x0)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240))
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x400880, 0x0)
ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f00000002c0)={0x2, 0x0, 0x7, 0x1, 0x84, 0x1, @lba=0x6, @msf={0x0, 0x9, 0x3f}})
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x59, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x58, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x63}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-%@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xa4}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/cdrom\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'dh\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'dh\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "1a50a99a140f7ddd35ab6fbd765b997188bc30385c9d97aa80b6177dd773802a03edd72e434a0140d3a347c2eb41b611f43819821ec998d056c4a95ed88283604f45169305de4ad36eff34a4787ee76b343945d7fb8ce993f11c7893c1228f862e97cd84db285dbf4098232754f3cfd90499a184849ec209d65048231d6fd20d53bb5696f0dbbd2780a658d7363691de2ca4d225851085a4e49d567e5c81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24000054}, 0x20000000)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000880)={0x400, 0x2, 0x80, 0x1c, 0xe, "ba7a44d5c60526bb"})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/138})
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x40)

[  103.074231] audit: type=1400 audit(1729497590.097:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:59:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xeab7702, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40104}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x324, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc706}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x1f, 0x3, 0x9}, {0x401, 0x9, 0x33, 0x100}, {0x5, 0xf6, 0x4}, {0x200, 0x7f, 0x7, 0x8000}, {0x0, 0x3, 0x1, 0x6}, {0x7, 0x5, 0x4, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x11}, 0x20)
keyctl$invalidate(0x15, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0xd64d3e85a2be8f0, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4f800}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x400]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x2400c000)
syz_open_dev$loop(&(0x7f0000000940), 0xcd91e44, 0x90000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x24501, 0x0)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000b40)=r2)
socketpair(0x21, 0xa, 0x4, &(0x7f0000000b80)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x214, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf22d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @local, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x667d3b18}}}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000801)
r8 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$assume_authority(0x10, r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00', <r9=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000010c0)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004018}, 0x4008040)

07:59:50 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
socketpair(0x15, 0x3, 0x4, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40840}, 0x4000000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x4008004)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r4, 0xf405f1ffe45fba7, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf24}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xd, 0x34, @random="d46acbee43b0c9e0c4"}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff)
syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r0)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x304, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bf58a91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x812}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7896a756}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa432}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc, 0x3, "0f7741502e50e594"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x47, 0x3, "dd0e119754c3ba47f127bb576d0079a033d9b0e0d145751491455f28dadded95a510e00c5e31fd3afa16a2be96fe6a7c20798572bf66c2b542db98d7793e98f241f989"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x64, 0x3, "51f72307811dfac5a1131f3db02f6cf369de0c340a36b2881130af7dcc43c31bad821d48467b4fc82b599fef7ea37ba729b3e445d20dd006604d82be7a3fa8b3a37ce04d7042ed6da7a0be8a0d3a8f1100ab77c10df5cfb22514a4753c1e8cdd"}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000}, 0x20004845)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40050)
r7 = getpid()
clone3(&(0x7f0000000e40)={0x100180, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x3}, &(0x7f0000000d00)=""/138, 0x8a, &(0x7f0000000dc0)=""/50, &(0x7f0000000e00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, r7, 0x0, 0x0], 0x8, {r6}}, 0x58)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000ec0), r1)

[  104.535853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  104.536907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.539563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  104.542284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  104.543739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  104.547042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  104.548305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  104.554246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.556808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.557740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  104.557871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  104.559699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  104.561878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  104.578789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  104.582602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  104.584108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  104.584987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.585985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  104.587228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  104.589917] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  104.591391] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  104.591794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  104.593686] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  104.595173] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  104.596214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  104.605582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  104.610288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  104.611587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.614339] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  104.619944] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  104.622810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.623351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  104.624547] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  104.627830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.629540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.646277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  104.647541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  104.648802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  104.651241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  104.652697] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  104.654463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  104.659470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  104.660748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  104.669923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.671023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  104.676549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.693631] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  104.700435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  106.609524] Bluetooth: hci3: command tx timeout
[  106.673605] Bluetooth: hci7: command tx timeout
[  106.737398] Bluetooth: hci4: command tx timeout
[  106.738094] Bluetooth: hci2: command tx timeout
[  106.739352] Bluetooth: hci5: command tx timeout
[  106.739941] Bluetooth: hci0: command tx timeout
[  106.801278] Bluetooth: hci6: command tx timeout
[  106.802074] Bluetooth: hci1: command tx timeout
[  108.658410] Bluetooth: hci3: command tx timeout
[  108.721470] Bluetooth: hci7: command tx timeout
[  108.785378] Bluetooth: hci4: command tx timeout
[  108.785949] Bluetooth: hci0: command tx timeout
[  108.786729] Bluetooth: hci5: command tx timeout
[  108.788013] Bluetooth: hci2: command tx timeout
[  108.849550] Bluetooth: hci1: command tx timeout
[  108.850088] Bluetooth: hci6: command tx timeout
[  110.705269] Bluetooth: hci3: command tx timeout
[  110.769246] Bluetooth: hci7: command tx timeout
[  110.833288] Bluetooth: hci4: command tx timeout
[  110.833845] Bluetooth: hci2: command tx timeout
[  110.834844] Bluetooth: hci0: command tx timeout
[  110.835375] Bluetooth: hci5: command tx timeout
[  110.897239] Bluetooth: hci6: command tx timeout
[  110.897773] Bluetooth: hci1: command tx timeout
[  112.753246] Bluetooth: hci3: command tx timeout
[  112.817234] Bluetooth: hci7: command tx timeout
[  112.881296] Bluetooth: hci2: command tx timeout
[  112.881860] Bluetooth: hci5: command tx timeout
[  112.882480] Bluetooth: hci0: command tx timeout
[  112.882951] Bluetooth: hci4: command tx timeout
[  112.945281] Bluetooth: hci6: command tx timeout
[  112.945830] Bluetooth: hci1: command tx timeout
[  164.388555] syz-executor.1 (281) used greatest stack depth: 23568 bytes left
[  167.049451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.064612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.070098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.123619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.124016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.127931] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  167.129282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.152457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.158522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.165936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.168329] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  167.169520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.192365] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.193936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.197511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.199147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.208965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.211090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.232463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.235676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  167.238033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  167.240920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  167.243679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.245337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  167.247080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.253570] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  167.254849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.269490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  167.270751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  167.272549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  167.273574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  167.274654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  167.279655] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  167.293421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  167.295730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  167.297524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  167.300338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  167.302450] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  167.303558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  167.306680] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  167.306775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  167.318403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  167.321348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  167.331298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  167.338461] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  167.339654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  167.363493] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  167.385617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  169.201272] Bluetooth: hci1: command tx timeout
[  169.265228] Bluetooth: hci0: command tx timeout
[  169.329254] Bluetooth: hci3: command tx timeout
[  169.329355] Bluetooth: hci2: command tx timeout
[  169.394983] Bluetooth: hci4: command tx timeout
[  169.395025] Bluetooth: hci6: command tx timeout
[  169.457240] Bluetooth: hci5: command tx timeout
[  169.521320] Bluetooth: hci7: command tx timeout
[  171.249471] Bluetooth: hci1: command tx timeout
[  171.315171] Bluetooth: hci0: command tx timeout
[  171.377512] Bluetooth: hci3: command tx timeout
[  171.378171] Bluetooth: hci2: command tx timeout
[  171.442203] Bluetooth: hci6: command tx timeout
[  171.442228] Bluetooth: hci4: command tx timeout
[  171.505287] Bluetooth: hci5: command tx timeout
[  171.569234] Bluetooth: hci7: command tx timeout
[  173.297273] Bluetooth: hci1: command tx timeout
[  173.361298] Bluetooth: hci0: command tx timeout
[  173.425206] Bluetooth: hci2: command tx timeout
[  173.425784] Bluetooth: hci3: command tx timeout
[  173.489236] Bluetooth: hci6: command tx timeout
[  173.489283] Bluetooth: hci4: command tx timeout
[  173.554214] Bluetooth: hci5: command tx timeout
[  173.617212] Bluetooth: hci7: command tx timeout
[  175.346217] Bluetooth: hci1: command tx timeout
[  175.409264] Bluetooth: hci0: command tx timeout
[  175.473239] Bluetooth: hci2: command tx timeout
[  175.474183] Bluetooth: hci3: command tx timeout
[  175.537180] Bluetooth: hci4: command tx timeout
[  175.538316] Bluetooth: hci6: command tx timeout
[  175.601291] Bluetooth: hci5: command tx timeout
[  175.665536] Bluetooth: hci7: command tx timeout
[  229.199652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  229.203801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  229.207551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  229.213203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  229.217875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  229.219225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  229.244788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  229.250993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  229.252402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  229.259917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  229.267516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  229.268790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.378482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  229.380219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  229.381987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  229.392811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  229.403447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  229.404956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  229.461371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.463660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.466649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.475312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.477232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  229.478652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  229.521909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  229.529587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  229.546956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  229.551642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.552888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  229.558257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.587546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.588614] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  229.593531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  229.622780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  229.624619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.626412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  229.633586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  229.638647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  229.642769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  229.675412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  229.713496] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  229.720502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  229.856168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  229.865910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  229.895316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  229.910404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  229.921363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  229.923352] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  231.281214] Bluetooth: hci1: command tx timeout
[  231.281245] Bluetooth: hci0: command tx timeout
[  231.473222] Bluetooth: hci2: command tx timeout
[  231.539185] Bluetooth: hci3: command tx timeout
[  231.666268] Bluetooth: hci4: command tx timeout
[  231.729318] Bluetooth: hci5: command tx timeout
[  231.858265] Bluetooth: hci6: command tx timeout
[  232.049363] Bluetooth: hci7: command tx timeout
[  233.331513] Bluetooth: hci1: command tx timeout
[  233.332044] Bluetooth: hci0: command tx timeout
[  233.521257] Bluetooth: hci2: command tx timeout
[  233.585194] Bluetooth: hci3: command tx timeout
[  233.714244] Bluetooth: hci4: command tx timeout
[  233.778268] Bluetooth: hci5: command tx timeout
[  233.905239] Bluetooth: hci6: command tx timeout
[  234.098200] Bluetooth: hci7: command tx timeout
[  235.378075] Bluetooth: hci1: command tx timeout
[  235.378234] Bluetooth: hci0: command tx timeout
[  235.569190] Bluetooth: hci2: command tx timeout
[  235.633253] Bluetooth: hci3: command tx timeout
[  235.761202] Bluetooth: hci4: command tx timeout
[  235.825213] Bluetooth: hci5: command tx timeout
[  235.953208] Bluetooth: hci6: command tx timeout
[  236.145207] Bluetooth: hci7: command tx timeout
[  237.425359] Bluetooth: hci1: command tx timeout
[  237.426379] Bluetooth: hci0: command tx timeout
[  237.618225] Bluetooth: hci2: command tx timeout
[  237.681397] Bluetooth: hci3: command tx timeout
[  237.809324] Bluetooth: hci4: command tx timeout
[  237.873884] Bluetooth: hci5: command tx timeout
[  238.002163] Bluetooth: hci6: command tx timeout
[  238.193214] Bluetooth: hci7: command tx timeout
[  291.459196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  291.460764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  291.461807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  291.464350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  291.468053] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  291.469321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  291.579583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  291.582730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  291.583903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  291.586567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  291.588560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  291.589591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  291.639052] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  291.646286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  291.647859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  291.651866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  291.653526] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  291.654525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  291.659437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  291.670485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  291.677638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  291.685595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  291.687362] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  291.689230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  291.703288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  291.707287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  291.718226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  291.720681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  291.722634] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  291.723819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  291.745178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  291.747506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  291.749456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  291.753042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  291.754650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  291.755850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  291.780157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  291.801352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  291.805615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  291.834520] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  291.849279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  291.853354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.875525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  291.877055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  291.924711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  291.929936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  291.932260] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  291.935203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  293.489266] Bluetooth: hci0: command tx timeout
[  293.617226] Bluetooth: hci1: command tx timeout
[  293.681182] Bluetooth: hci2: command tx timeout
[  293.745195] Bluetooth: hci4: command tx timeout
[  293.745910] Bluetooth: hci3: command tx timeout
[  293.809437] Bluetooth: hci5: command tx timeout
[  293.938210] Bluetooth: hci6: command tx timeout
[  294.001413] Bluetooth: hci7: command tx timeout
[  295.538141] Bluetooth: hci0: command tx timeout
[  295.666236] Bluetooth: hci1: command tx timeout
[  295.729341] Bluetooth: hci2: command tx timeout
[  295.793201] Bluetooth: hci3: command tx timeout
[  295.795180] Bluetooth: hci4: command tx timeout
[  295.857235] Bluetooth: hci5: command tx timeout
[  295.986253] Bluetooth: hci6: command tx timeout
[  296.050116] Bluetooth: hci7: command tx timeout
[  297.585222] Bluetooth: hci0: command tx timeout
[  297.713165] Bluetooth: hci1: command tx timeout
[  297.777941] Bluetooth: hci2: command tx timeout
[  297.841189] Bluetooth: hci3: command tx timeout
[  297.842980] Bluetooth: hci4: command tx timeout
[  297.905161] Bluetooth: hci5: command tx timeout
[  298.033214] Bluetooth: hci6: command tx timeout
[  298.097434] Bluetooth: hci7: command tx timeout
[  299.633530] Bluetooth: hci0: command tx timeout
[  299.761259] Bluetooth: hci1: command tx timeout
[  299.826224] Bluetooth: hci2: command tx timeout
[  299.889210] Bluetooth: hci4: command tx timeout
[  299.890616] Bluetooth: hci3: command tx timeout
[  299.953210] Bluetooth: hci5: command tx timeout
[  300.081451] Bluetooth: hci6: command tx timeout
[  300.146397] Bluetooth: hci7: command tx timeout
[  354.117529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  354.119931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  354.123813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  354.142674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  354.147972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  354.150625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  354.168246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  354.175446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  354.181790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  354.187931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  354.204171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  354.213308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  354.241210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  354.245417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  354.247544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  354.251162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  354.257695] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  354.259833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  354.310616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  354.317895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  354.320499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  354.327506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  354.332265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  354.336687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  354.349665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  354.360348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  354.374190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  354.376718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  354.379420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  354.382503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  354.388365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  354.394297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  354.406213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  354.409307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.411931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  354.414431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  354.420913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  354.424442] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  354.427514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  354.429370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  354.442290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  354.454278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  354.585636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  354.599444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  354.612391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  354.641165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  354.666379] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  354.675581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  356.209210] Bluetooth: hci0: command tx timeout
[  356.273254] Bluetooth: hci1: command tx timeout
[  356.337199] Bluetooth: hci2: command tx timeout
[  356.401140] Bluetooth: hci4: command tx timeout
[  356.468119] Bluetooth: hci3: command tx timeout
[  356.532142] Bluetooth: hci6: command tx timeout
[  356.593132] Bluetooth: hci5: command tx timeout
[  356.785144] Bluetooth: hci7: command tx timeout
[  358.257273] Bluetooth: hci0: command tx timeout
[  358.321412] Bluetooth: hci1: command tx timeout
[  358.385136] Bluetooth: hci2: command tx timeout
[  358.449176] Bluetooth: hci4: command tx timeout
[  358.514194] Bluetooth: hci3: command tx timeout
[  358.577255] Bluetooth: hci6: command tx timeout
[  358.641483] Bluetooth: hci5: command tx timeout
[  358.833206] Bluetooth: hci7: command tx timeout
[  360.305149] Bluetooth: hci0: command tx timeout
[  360.369143] Bluetooth: hci1: command tx timeout
[  360.434111] Bluetooth: hci2: command tx timeout
[  360.497153] Bluetooth: hci4: command tx timeout
[  360.561129] Bluetooth: hci3: command tx timeout
[  360.625170] Bluetooth: hci6: command tx timeout
[  360.690113] Bluetooth: hci5: command tx timeout
[  360.881613] Bluetooth: hci7: command tx timeout
[  362.353179] Bluetooth: hci0: command tx timeout
[  362.417235] Bluetooth: hci1: command tx timeout
[  362.483092] Bluetooth: hci2: command tx timeout
[  362.545229] Bluetooth: hci4: command tx timeout
[  362.609195] Bluetooth: hci3: command tx timeout
[  362.673141] Bluetooth: hci6: command tx timeout
[  362.737586] Bluetooth: hci5: command tx timeout
[  362.929129] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:04:53  Registers:
info registers vcpu 0
RAX=00007f22e3e7aa1c RBX=00007f22e3efd430 RCX=000000000000000e RDX=00007f22e3e802b8
RSI=00007f22e3e7c4d8 RDI=00007f22e3e794ec RBP=00007ffcdfa4f950 RSP=00007ffcdfa4f8e0
R8 =00007f22e4356a20 R9 =00007f22e3e79fcc R10=00007f22e3eb33c0 R11=0000000000000000
R12=00007ffcdfa4f940 R13=00007f22e438d060 R14=000000000003e3c0 R15=00007f22e3e79ffc
RIP=00007f22e3fac380 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f22e3e4c540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f22e3fac270 CR3=0000000033044000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802ecafa90 RCX=0000000000000000 RDX=1ffff1100124b96d
RSI=ffffffff8169b03f RDI=ffff88800925cb68 RBP=ffff88800925cb00 RSP=ffff88802ecafa38
R8 =0000000000000001 R9 =ffff8880347bc138 R10=0000000000000001 R11=0000000000000000
R12=ffffea0000225e80 R13=ffff8880092ac988 R14=dffffc0000000000 R15=ffff8880092ac980
RIP=ffffffff84822e76 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f12140b1540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1214568038 CR3=000000002d776000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000